@pyreon/zero 0.12.2 → 0.12.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pyreon/zero",
-  "version": "0.12.2",
+  "version": "0.12.4",
   "description": "Pyreon Zero — zero-config full-stack framework powered by Pyreon and Vite",
   "license": "MIT",
   "author": "Vit Bokisch",
@@ -27,6 +27,11 @@
       "import": "./lib/index.js",
       "types": "./lib/types/index.d.ts"
     },
+    "./server": {
+      "bun": "./src/server.ts",
+      "import": "./lib/server.js",
+      "types": "./lib/types/server.d.ts"
+    },
     "./client": {
       "bun": "./src/client.ts",
       "import": "./lib/client.js",
@@ -122,7 +127,7 @@
       "import": "./lib/og-image.js",
       "types": "./lib/types/og-image.d.ts"
     },
-    "./i18n": {
+    "./i18n-routing": {
       "bun": "./src/i18n-routing.ts",
       "import": "./lib/i18n-routing.js",
       "types": "./lib/types/i18n-routing.d.ts"
@@ -154,24 +159,24 @@
     }
   },
   "scripts": {
-    "build": "vl_rolldown_build && tsc",
+    "build": "vl_rolldown_build",
     "dev": "vl_rolldown_build-watch",
     "test": "vitest run",
     "typecheck": "tsc --noEmit",
     "lint": "oxlint ."
   },
   "dependencies": {
-    "@pyreon/core": "^0.12.2",
-    "@pyreon/head": "^0.12.2",
-    "@pyreon/meta": "^0.12.2",
-    "@pyreon/router": "^0.12.2",
-    "@pyreon/runtime-dom": "^0.12.2",
-    "@pyreon/runtime-server": "^0.12.2",
-    "@pyreon/server": "^0.12.2",
-    "@pyreon/vite-plugin": "^0.12.2",
+    "@pyreon/core": "^0.12.4",
+    "@pyreon/head": "^0.12.4",
+    "@pyreon/meta": "^0.12.4",
+    "@pyreon/router": "^0.12.4",
+    "@pyreon/runtime-dom": "^0.12.4",
+    "@pyreon/runtime-server": "^0.12.4",
+    "@pyreon/server": "^0.12.4",
+    "@pyreon/vite-plugin": "^0.12.4",
     "vite": "^8.0.0"
   },
   "peerDependencies": {
-    "@pyreon/reactivity": "^0.12.2"
+    "@pyreon/reactivity": "^0.12.4"
   }
 }

package/src/actions.ts

@@ -34,7 +34,6 @@ export interface Action<T = unknown> {
 // ─── Registry ────────────────────────────────────────────────────────────────
 
 const actionRegistry = new Map<string, RegisteredAction>()
-let actionCounter = 0
 
 /**
  * Define a server action. Returns a callable function that:
@@ -53,7 +52,7 @@ let actionCounter = 0
  * const result = await createPost({ title: 'Hello', body: '...' })
  */
 export function defineAction<T = unknown>(handler: ActionHandler<T>): Action<T> {
-  const id = `action_${actionCounter++}`
+  const id = `action_${crypto.randomUUID().slice(0, 8)}`
 
   actionRegistry.set(id, { id, handler: handler as ActionHandler })
 
@@ -100,7 +99,6 @@ export function getRegisteredActions(): Map<string, RegisteredAction> {
  */
 export function _resetActions(): void {
   actionRegistry.clear()
-  actionCounter = 0
 }
 
 // ─── Server handler ──────────────────────────────────────────────────────────

package/src/adapters/bun.ts

@@ -1,4 +1,5 @@
 import type { Adapter, AdapterBuildOptions } from '../types'
+import { validateBuildInputs } from './validate'
 
 /**
  * Bun adapter — generates a standalone Bun.serve() entry.
@@ -7,6 +8,7 @@ export function bunAdapter(): Adapter {
   return {
     name: 'bun',
     async build(options: AdapterBuildOptions) {
+      await validateBuildInputs(options)
       const { writeFile, cp, mkdir } = await import('node:fs/promises')
       const { join } = await import('node:path')
 

package/src/adapters/cloudflare.ts

@@ -1,4 +1,5 @@
 import type { Adapter, AdapterBuildOptions } from '../types'
+import { validateBuildInputs } from './validate'
 
 /**
  * Cloudflare Pages adapter — generates output for Cloudflare Pages with Functions.
@@ -27,6 +28,7 @@ export function cloudflareAdapter(): Adapter {
   return {
     name: 'cloudflare',
     async build(options: AdapterBuildOptions) {
+      await validateBuildInputs(options)
       const { writeFile, cp, mkdir } = await import('node:fs/promises')
       const { join } = await import('node:path')
 

package/src/adapters/netlify.ts

@@ -1,4 +1,5 @@
 import type { Adapter, AdapterBuildOptions } from '../types'
+import { validateBuildInputs } from './validate'
 
 /**
  * Netlify adapter — generates output for Netlify Functions (v2).
@@ -22,6 +23,7 @@ export function netlifyAdapter(): Adapter {
   return {
     name: 'netlify',
     async build(options: AdapterBuildOptions) {
+      await validateBuildInputs(options)
       const { writeFile, cp, mkdir } = await import('node:fs/promises')
       const { join } = await import('node:path')
 

package/src/adapters/node.ts

@@ -1,4 +1,5 @@
 import type { Adapter, AdapterBuildOptions } from '../types'
+import { validateBuildInputs } from './validate'
 
 /**
  * Node.js adapter — generates a standalone server entry using node:http.
@@ -7,6 +8,7 @@ export function nodeAdapter(): Adapter {
   return {
     name: 'node',
     async build(options: AdapterBuildOptions) {
+      await validateBuildInputs(options)
       const { writeFile, cp, mkdir } = await import('node:fs/promises')
       const { join } = await import('node:path')
 

package/src/adapters/validate.ts

@@ -0,0 +1,16 @@
+import type { AdapterBuildOptions } from '../types'
+
+/**
+ * Validate that adapter build inputs exist before copying.
+ * Throws with a clear error message if directories are missing.
+ * @internal
+ */
+export async function validateBuildInputs(options: AdapterBuildOptions): Promise<void> {
+  const { existsSync } = await import('node:fs')
+  if (!existsSync(options.clientOutDir)) {
+    throw new Error(`[zero:adapter] Client build output not found: ${options.clientOutDir}. Run "vite build" first.`)
+  }
+  if (!existsSync(options.serverEntry)) {
+    throw new Error(`[zero:adapter] Server entry not found: ${options.serverEntry}. Run "vite build --ssr" first.`)
+  }
+}

package/src/adapters/vercel.ts

@@ -1,4 +1,5 @@
 import type { Adapter, AdapterBuildOptions } from '../types'
+import { validateBuildInputs } from './validate'
 
 /**
  * Vercel adapter — generates output for Vercel's Build Output API v3.
@@ -22,6 +23,7 @@ export function vercelAdapter(): Adapter {
   return {
     name: 'vercel',
     async build(options: AdapterBuildOptions) {
+      await validateBuildInputs(options)
       const { writeFile, cp, mkdir } = await import('node:fs/promises')
       const { join } = await import('node:path')
 

package/src/compression.ts

@@ -94,7 +94,23 @@ export function isCompressible(contentType: string): boolean {
 }
 
 async function compress(data: ArrayBuffer, encoding: 'gzip' | 'deflate'): Promise<ArrayBuffer> {
-  const format = encoding === 'gzip' ? 'gzip' : 'deflate'
-  const stream = new Blob([data]).stream().pipeThrough(new CompressionStream(format))
-  return new Response(stream).arrayBuffer()
+  // CompressionStream is available in modern browsers and Node 18+/Bun.
+  // Fallback: try node:zlib for older runtimes.
+  if (typeof CompressionStream !== 'undefined') {
+    const format = encoding === 'gzip' ? 'gzip' : 'deflate'
+    const stream = new Blob([data]).stream().pipeThrough(new CompressionStream(format))
+    return new Response(stream).arrayBuffer()
+  }
+
+  // Node.js fallback via zlib
+  try {
+    const zlib = await import('node:zlib')
+    const { promisify } = await import('node:util')
+    const fn = encoding === 'gzip' ? promisify(zlib.gzip) : promisify(zlib.deflate)
+    const result = await fn(Buffer.from(data))
+    return result.buffer.slice(result.byteOffset, result.byteOffset + result.byteLength)
+  } catch {
+    // No compression available — return uncompressed
+    return data
+  }
 }

package/src/entry-server.ts

@@ -50,19 +50,42 @@ function createRouteMiddlewareDispatcher(
 	};
 }
 
-/** Simple URL pattern matcher supporting :param and :param* segments. */
+/**
+ * URL pattern matcher supporting :param and :param* segments.
+ *
+ * Rules:
+ * - Static segments must match exactly
+ * - `:param` matches a single path segment
+ * - `:param*` matches all remaining segments (must be last, and path must
+ *   have matched all preceding segments)
+ * - Path length must match pattern length (unless catch-all)
+ */
 export function matchPattern(pattern: string, path: string): boolean {
 	const patternParts = pattern.split("/").filter(Boolean);
 	const pathParts = path.split("/").filter(Boolean);
 
 	for (let i = 0; i < patternParts.length; i++) {
-		const pp = patternParts[i];
-		if (!pp) continue;
-		if (pp.endsWith("*")) return true; // catch-all matches everything after
-		if (pp.startsWith(":")) continue; // dynamic segment matches anything
+		const pp = patternParts[i]!;
+
+		// Catch-all: matches remaining segments, but only if we've matched
+		// all preceding segments up to this point
+		if (pp.endsWith("*")) {
+			// All segments before the catch-all must have matched (we got here)
+			// and there must be at least one remaining path segment
+			return i <= pathParts.length;
+		}
+
+		// No more path segments to match against
+		if (i >= pathParts.length) return false;
+
+		// Dynamic segment matches any single segment
+		if (pp.startsWith(":")) continue;
+
+		// Static segment must match exactly
 		if (pp !== pathParts[i]) return false;
 	}
 
+	// All pattern parts consumed — path must also be fully consumed
 	return patternParts.length === pathParts.length;
 }
 

package/src/index.ts

@@ -1,46 +1,17 @@
-// ─── Core ─────────────────────────────────────────────────────────────────────
-
-export type { CreateAppOptions } from "./app";
-export { createApp } from "./app";
-export type { CreateServerOptions } from "./entry-server";
-export { createServer } from "./entry-server";
-
-// ─── Vite plugin ─────────────────────────────────────────────────────────────
-
-export { zeroPlugin as default } from "./vite-plugin";
-
-// ─── File-system routing ─────────────────────────────────────────────────────
-
-export type { GenerateRouteModuleOptions } from './fs-router'
-export {
-	filePathToUrlPath,
-	generateMiddlewareModule,
-	generateRouteModule,
-	parseFileRoutes,
-	scanRouteFiles,
-} from './fs-router'
-
-// ─── Config ──────────────────────────────────────────────────────────────────
-
-export { defineConfig, resolveConfig } from "./config";
-
-// ─── ISR ─────────────────────────────────────────────────────────────────────
-
-export { createISRHandler } from "./isr";
-
-// ─── Adapters ────────────────────────────────────────────────────────────────
-
-export {
-	bunAdapter,
-	cloudflareAdapter,
-	netlifyAdapter,
-	nodeAdapter,
-	resolveAdapter,
-	staticAdapter,
-	vercelAdapter,
-} from "./adapters";
-
-// ─── Components ─────────────────────────────────────────────────────────────
+/**
+ * @pyreon/zero — client-safe exports.
+ *
+ * This entry contains only browser-safe components and hooks.
+ * No node:fs, node:path, or other server-only imports.
+ *
+ * For server/build-time features, use subpath imports:
+ *   import { faviconPlugin } from "@pyreon/zero/favicon"
+ *   import { createServer } from "@pyreon/zero/server"
+ *   import { defineConfig } from "@pyreon/zero/config"
+ *   import { validateEnv } from "@pyreon/zero/env"
+ */
+
+// ─── Components (browser-safe) ──────────────────────────────────────────────
 
 export type { ImageProps, ImageSource } from "./image";
 export { Image } from "./image";
@@ -48,46 +19,16 @@ export type { LinkProps, LinkRenderProps, UseLinkReturn } from "./link";
 export { createLink, Link, prefetchRoute, useLink } from "./link";
 export type { ScriptProps, ScriptStrategy } from "./script";
 export { Script } from "./script";
+export type { MetaProps } from "./meta";
+export { buildMetaTags, Meta } from "./meta";
 
-// ─── 404 Not Found ──────────────────────────────────────────────────────────
-
-export { render404Page } from "./not-found";
-
-// ─── Middleware ──────────────────────────────────────────────────────────────
-
-export type { CacheConfig, CacheRule } from "./cache";
-export { cacheMiddleware, securityHeaders, varyEncoding } from "./cache";
-export { compose, getContext } from "./middleware";
-
-// ─── Font optimization ─────────────────────────────────────────────────────
-
-export type {
-	FallbackMetrics,
-	FontConfig,
-	FontDisplay,
-	GoogleFontInput,
-	GoogleFontStatic,
-	GoogleFontVariable,
-	LocalFont,
-} from "./font";
-export { fontPlugin, fontVariables } from "./font";
-
-// ─── Image processing ──────────────────────────────────────────────────────
-
-export type {
-	FormatSource,
-	ImageFormat,
-	ImagePluginConfig,
-	ProcessedImage,
-} from "./image-plugin";
-export { imagePlugin } from "./image-plugin";
-
-// ─── Theme ──────────────────────────────────────────────────────────────────
+// ─── Theme (browser-safe) ───────────────────────────────────────────────────
 
 export type { Theme } from "./theme";
 export {
 	initTheme,
 	resolvedTheme,
+	setSSRThemeDefault,
 	setTheme,
 	ThemeToggle,
 	theme,
@@ -95,120 +36,17 @@ export {
 	toggleTheme,
 } from "./theme";
 
-// ─── SEO ────────────────────────────────────────────────────────────────────
-
-export type {
-	ChangeFreq,
-	JsonLdType,
-	RobotsConfig,
-	RobotsRule,
-	SeoPluginConfig,
-	SitemapConfig,
-	SitemapEntry,
-} from "./seo";
-export {
-	generateRobots,
-	generateSitemap,
-	jsonLd,
-	seoMiddleware,
-	seoPlugin,
-} from "./seo";
-
-// ─── API routes ──────────────────────────────────────────────────────────────
-
-export type {
-	ApiContext,
-	ApiHandler,
-	ApiRouteEntry,
-	ApiRouteModule,
-	HttpMethod,
-} from "./api-routes";
-export { createApiMiddleware, generateApiRouteModule } from "./api-routes";
-
-// ─── CORS ────────────────────────────────────────────────────────────────────
-
-export type { CorsConfig } from "./cors";
-export { corsMiddleware } from "./cors";
-
-// ─── Rate limiting ──────────────────────────────────────────────────────────
-
-export type { RateLimitConfig } from "./rate-limit";
-export { rateLimitMiddleware } from "./rate-limit";
-
-// ─── Compression ────────────────────────────────────────────────────────────
-
-export type { CompressionConfig } from "./compression";
-export {
-	compressionMiddleware,
-	compressResponse,
-	isCompressible,
-} from "./compression";
-
-// ─── Actions ─────────────────────────────────────────────────────────────────
-
-export type { Action, ActionContext, ActionHandler } from "./actions";
-export { createActionMiddleware, defineAction } from "./actions";
-
-// ─── Favicon ────────────────────────────────────────────────────────────────
-
-export type { FaviconLocaleConfig, FaviconPluginConfig } from "./favicon";
-export { faviconLinks, faviconPlugin } from "./favicon";
-
-// ─── OG Image ───────────────────────────────────────────────────────────────
-
-export type {
-	OgImageLayer,
-	OgImagePluginConfig,
-	OgImageTemplate,
-} from "./og-image";
-export { ogImagePath, ogImagePlugin } from "./og-image";
-
-// ─── Meta ───────────────────────────────────────────────────────────────────
-
-export type { MetaProps } from "./meta";
-export { buildMetaTags, Meta } from "./meta";
-
-// ─── I18n routing ───────────────────────────────────────────────────────────
+// ─── I18n hooks (browser-safe) ──────────────────────────────────────────────
 
 export type { I18nRoutingConfig, LocaleContext } from "./i18n-routing";
 export {
 	buildLocalePath,
-	createLocaleContext,
-	detectLocaleFromHeader,
 	extractLocaleFromPath,
-	i18nRouting,
 	setLocale,
 	useLocale,
 } from "./i18n-routing";
 
-// ─── CSP ────────────────────────────────────────────────────────────────────
-
-export type { CspConfig, CspDirectives } from "./csp";
-export { buildCspHeader, cspMiddleware, useNonce } from "./csp";
-
-// ─── Environment validation ─────────────────────────────────────────────────
-
-export type { LogEntry, LoggerConfig } from "./logger";
-export { loggerMiddleware } from "./logger";
-
-// ─── Request logging ────────────────────────────────────────────────────────
-
-export type { EnvValidator } from "./env";
-export { bool, num, oneOf, publicEnv, schema, str, url, validateEnv } from "./env";
-
-// ─── AI integration ─────────────────────────────────────────────────────────
-
-export type { AiPluginConfig, InferJsonLdOptions } from "./ai";
-export {
-	aiPlugin,
-	generateAiPluginManifest,
-	generateLlmsFullTxt,
-	generateLlmsTxt,
-	generateOpenApiSpec,
-	inferJsonLd,
-} from "./ai";
-
-// ─── Types ───────────────────────────────────────────────────────────────────
+// ─── Types (no runtime, safe everywhere) ────────────────────────────────────
 
 export type {
 	Adapter,

package/src/link.tsx

@@ -70,10 +70,16 @@ export interface UseLinkReturn {
   classes: () => string
 }
 
+const MAX_PREFETCH_CACHE = 200
 const prefetched = new Set<string>()
 
 function doPrefetch(href: string) {
   if (prefetched.has(href)) return
+  // Evict oldest entries when cache is full
+  if (prefetched.size >= MAX_PREFETCH_CACHE) {
+    const first = prefetched.values().next().value
+    if (first) prefetched.delete(first)
+  }
   prefetched.add(href)
 
   const docLink = document.createElement('link')

package/src/meta.tsx

@@ -1,10 +1,45 @@
 import type { VNodeChild } from '@pyreon/core'
+import type { UseHeadInput } from '@pyreon/head'
 import { useHead } from '@pyreon/head'
-import type { FaviconPluginConfig } from './favicon'
-import { faviconLinks } from './favicon'
 import type { I18nRoutingConfig } from './i18n-routing'
 import { extractLocaleFromPath } from './i18n-routing'
-import { ogImagePath } from './og-image'
+
+// ─── Inline helpers (no node:fs dependency) ─────────────────────────────────
+// These are inlined to avoid importing from favicon.ts/og-image.ts which
+// pull in node:fs at the top level — making Meta unsafe for client bundles.
+
+/** Favicon plugin config shape (type-only). */
+interface FaviconPluginConfig {
+  source: string
+  themeColor?: string
+  manifest?: boolean
+  locales?: Record<string, { source: string; darkSource?: string }>
+  [key: string]: unknown
+}
+
+function faviconLinks(
+  locale: string | undefined,
+  config: FaviconPluginConfig,
+): Array<{ rel: string; type?: string; sizes?: string; href: string }> {
+  const hasLocaleOverride = locale && config.locales?.[locale]
+  const prefix = hasLocaleOverride ? `/${locale}` : ''
+  const isSvg = (hasLocaleOverride ? config.locales![locale]!.source : config.source).endsWith('.svg')
+  const links: Array<{ rel: string; type?: string; sizes?: string; href: string }> = []
+  if (isSvg) links.push({ rel: 'icon', type: 'image/svg+xml', href: `${prefix}/favicon.svg` })
+  links.push(
+    { rel: 'icon', type: 'image/png', sizes: '32x32', href: `${prefix}/favicon-32x32.png` },
+    { rel: 'icon', type: 'image/png', sizes: '16x16', href: `${prefix}/favicon-16x16.png` },
+    { rel: 'apple-touch-icon', sizes: '180x180', href: `${prefix}/apple-touch-icon.png` },
+  )
+  if (config.manifest !== false) links.push({ rel: 'manifest', href: `${prefix}/site.webmanifest` })
+  return links
+}
+
+function ogImagePath(templateName: string, locale?: string, outDir = 'og', format: 'png' | 'jpeg' = 'png'): string {
+  const ext = format === 'jpeg' ? 'jpg' : 'png'
+  const suffix = locale ? `-${locale}` : ''
+  return `/${outDir}/${templateName}${suffix}.${ext}`
+}
 
 // ─── Meta component ────────────────────────────────────────────────────────
 
@@ -121,26 +156,53 @@ export function Meta(props: MetaProps): VNodeChild {
   // If title or description are reactive accessors, pass a getter to useHead
   // so it re-evaluates when the signals change.
   if (hasReactiveTitle || hasReactiveDescription) {
-    useHead((() => {
+    useHead((): UseHeadInput => {
       const title = resolveStr(props.title)
       const description = resolveStr(props.description)
-      const tags = buildMetaTags({ ...props, title, description } as any)
-      return { title, meta: tags.meta, link: tags.link, script: tags.script }
-    }) as any)
+      const resolved = { ...props, title, description } as Parameters<typeof buildMetaTags>[0]
+      const tags = buildMetaTags(resolved)
+      const input: UseHeadInput = { meta: tags.meta, link: tags.link, script: tags.script }
+      if (title) input.title = title
+      return input
+    })
   } else {
     const title = resolveStr(props.title)
     const description = resolveStr(props.description)
-    const tags = buildMetaTags({ ...props, title, description } as any)
-    useHead({ title, meta: tags.meta, link: tags.link, script: tags.script } as any)
+    const resolved = { ...props, title, description } as Parameters<typeof buildMetaTags>[0]
+    const tags = buildMetaTags(resolved)
+    const input: UseHeadInput = { meta: tags.meta, link: tags.link, script: tags.script }
+    if (title) input.title = title
+    useHead(input)
   }
 
   return props.children ?? null
 }
 
+interface MetaTagEntry {
+  name?: string
+  property?: string
+  content: string
+  [key: string]: string | undefined
+}
+
+interface LinkTagEntry {
+  rel: string
+  href?: string
+  hreflang?: string
+  type?: string
+  sizes?: string
+  [key: string]: string | undefined
+}
+
+interface ScriptTagEntry {
+  type: string
+  children: string
+}
+
 interface MetaTags {
-  meta: Array<Record<string, string>>
-  link: Array<Record<string, string>>
-  script: Array<{ type: string; children: string }>
+  meta: MetaTagEntry[]
+  link: LinkTagEntry[]
+  script: ScriptTagEntry[]
 }
 
 export function buildMetaTags(
@@ -149,9 +211,9 @@ export function buildMetaTags(
     description?: string
   },
 ): MetaTags {
-  const meta: Array<Record<string, string>> = []
-  const link: Array<Record<string, string>> = []
-  const script: Array<{ type: string; children: string }> = []
+  const meta: MetaTagEntry[] = []
+  const link: LinkTagEntry[] = []
+  const script: ScriptTagEntry[] = []
 
   const {
     title, description, canonical, imageAlt, imageWidth, imageHeight,
@@ -280,7 +342,7 @@ export function buildMetaTags(
   if (favicon) {
     const faviconLocale = locale !== 'en_US' ? locale : undefined
     for (const fl of faviconLinks(faviconLocale, favicon)) {
-      link.push(fl as Record<string, string>)
+      link.push(fl as LinkTagEntry)
     }
     // Theme color meta from favicon config
     if (favicon.themeColor) {